On the latest Patch Tuesday, industry leaders Siemens, Schneider Electric, and Rockwell Automation released crucial ICS security advisories. These updates are pivotal in addressing vulnerabilities within industrial control systems, ensuring the protection of critical infrastructure.
Siemens Releases 17 Security Advisories
Siemens issued 17 new advisories detailing various security patches and mitigations. The company has focused on critical vulnerabilities found in Simatic S7-1500 CPUs, Industrial Edge devices, and Ruggedcom Crossbow Station Access Controller (SAC). Over 400 vulnerabilities affecting the GNU/Linux subsystem in Simatic CPUs were addressed.
High-severity issues within Ruggedcom Crossbow, Simatic IPC, and other products like PSS(R)SINCAL and the .NET Client Library for Simatic S7 Webserver API have also been tackled. Siemens provided fixes for medium-severity vulnerabilities in Sentron 3NA COM Fuse and Capital Embedded AR Classic. Additionally, the company alerted users about a documentation issue impacting Simatic S7 PLCs.
Schneider Electric and Rockwell Automation Updates
Schneider Electric announced two advisories that cover high-severity vulnerabilities. One advisory targets Pro-face STW6000 and Harmony STW6, where attackers could gain control by redirecting users to malicious websites. The other advisory involves Sage RTUs, allowing privileged users to install harmful firmware.
Rockwell Automation disclosed vulnerabilities in the 1732E ArmorBlock. A critical flaw allows unauthorized attackers to alter the web server password, risking administrative account compromise. Another vulnerability identified is a Denial of Service (DoS) issue.
Additional Cybersecurity Advisories
CISA released two ICS advisories, focusing on vulnerabilities in Swann SWIFI-SE2KIC cameras and a privilege escalation issue in Inductive Automation’s Ignition product. Germany’s CERT@VDE also issued a warning about an information disclosure issue affecting Bender’s Customer&Partner platform.
Furthermore, organizations such as Moxa, Honeywell, Hitachi Energy, Johnson Controls, and ABB have published advisories since the last Patch Tuesday. Notably, ABB addressed a vulnerability in dynovaPRO, which could facilitate account takeovers, although no exploitation in the field has been reported.
Organizations are encouraged to monitor updates from CISA and CERT@VDE regularly, as these entities continue to publish vital ICS security advisories.
Remaining vigilant and applying timely patches are essential steps in safeguarding critical infrastructure from potential cybersecurity threats.
